策略半隐藏且支持更新的多机构属性加密方案

doi:10.3969/j.issn.1001-2400.2018.02.021

西安电子科技大学学报

策略半隐藏且支持更新的多机构属性加密方案

闫玺玺1;刘媛1;李子臣2;汤永利1

(1. 河南理工大学计算机科学与技术学院，河南焦作 454003;
2. 北京印刷学院信息工程学院，北京 102600)

收稿日期:2017-04-27 出版日期:2018-04-20 发布日期:2018-06-06
通讯作者: 汤永利(1972-)，男，教授，博士，E-mail: yltang@hpu.edu.cn
作者简介:闫玺玺(1985-)，女，讲师，博士， E-mail：yanxx@hpu.edu.cn．
基金资助:
国家自然科学基金资助项目(61300216)；河南省科技厅资助项目(132102210123)；河南省教育厅科研资助项目(16A520013)；河南理工大学博士基金资助项目(B2014-044)

Multi-authority attribute-based encryption scheme with policy semi-hidden and dynamic updating

YAN Xixi1;LIU Yuan1;LI Zichen2;TANG Yongli1

(1. School of Computer Science and Technology, Henan Polytechnic Univ., Jiaozuo 454003, China;
2. School of Information Engineering, Beijing Institute of Graphic Communication, Beijing 102600, China)

Received:2017-04-27 Online:2018-04-20 Published:2018-06-06

摘要/Abstract

摘要：

针对云环境中采用属性基加密机制所引起的隐私泄露和策略更新开销大的问题，提出支持访问策略半隐藏和动态更新的多机构属性基加密方案．该方案采用策略半隐藏方式，将属性分为属性名和属性值两部分，通过对用户的属性值进行隐藏，保护用户的所有属性隐私，避免用户的具体属性值泄露给第三方．另外，方案采用线性秘密共享技术，引入动态策略更新算法，支持与、或、非等任何类型的策略更新，减少传统策略更新中的计算和通信开销．经安全性分析证明，该方案在标准模型下满足选择明文攻击安全．通过与其他方案对比，用户密钥大小、密文大小和解密代价均有所优化，更加适用于云环境中需保护用户隐私及支持策略更新的情况．

关键词: 属性基加密, 多机构, 策略半隐藏, 策略更新

Abstract:

Attribute-Based Encryption (ABE) is a new cryptographic technique which guarantees fine-grained access control of outsourced encrypted data in the cloud. However, privacy revealing and policy updating are the key limitations. Thus, a Multi-Authority attribute-based encryption scheme with policy partially hidden and dynamic updating is proposed. In the scheme, the users' attribute is divided into two parts: the attribute name and the attribute value. The values of the user's attributes are hidden to prevent from revealing to any third parties. In addition, the Linear Secret-Sharing Scheme(LSSS) access structure and policy updating algorithms can support any type of policy updating, and it proves secure against the chosen plaintext attack in the standard model. Compared to the existing related schemes, the size of both users' secret key and ciphertext is reduced, and the lower computing cost makes it more effective in protecting users' attributes and support policy updates.

Key words: attribute based encryption, multi-authority, policy semi-hidden, policy updating

闫玺玺;刘媛;李子臣;汤永利. 策略半隐藏且支持更新的多机构属性加密方案[J]. 西安电子科技大学学报, 2018, 45(2): 122-128+147.

YAN Xixi;LIU Yuan;LI Zichen;TANG Yongli. Multi-authority attribute-based encryption scheme with policy semi-hidden and dynamic updating[J]. Journal of Xidian University, 2018, 45(2): 122-128+147.

参考文献

［1］ SAHAI A, WATERS B. Fuzzy Identity-based Encryption［C］//Lecture Notes in Computer Science: 3494. Heidelberg: Springer Verlag, 2005, 457-473 .
［2］ CHASE M. Multi-authority Attribute Based Encryption［C］//Lecture Notes in Computer Science: 4392. Heidelberg: Springer Verlag, 2007, 515-534.
［3］ LIN H , CAO Z F, LIANG X H, et al. Secure Threshold Multi-authority Attribute Based Encryption without a Central Authority［C］//Lecture Notes in Computer Science: 5365. Heidelberg: Springer-Verlag, 2008: 426-436.
［4］ CHASE M, CHOW S S M. Improving Privacy and Security in Multi-authority Attribute-based Encryption［C］//Proceedings of the 2009 ACM Conference on Computer and Communication Security. New York: ACM, 2009: 121-130.
［5］ LEWKO A, WATERS B. Decentralizing Attribute-based Encryption［C］//Lecture Notes in Computer Science: 6632. Heidelberg: Springer Verlag, 2011: 568-588.
［6］ XHAFA F, FENG J L, ZHANG Y H, et al. Privacy-aware Attribute-based PHR Sharing with User Accountability in Cloud Computing［J］. Journal of Supercomputing, 2015, 71(5): 1607-1619.
［7］ HAN J G, SUSILO W, MU Y, et al. Improving Privacy and Security in Decentralized Ciphertext-policy Attribute-based Encryption［J］. IEEE Transactions on Information Forensics and Security, 2015, 10(3): 665-678.
［8］ WANG M Q, ZHANG Z F, CHEN C. Security Analysis of a Privacy-preserving Decentralized Ciphertext-policy Attribute-based Encryption Scheme［J］. Concurrency Computation, 2016, 28(4): 1237-1245.
［9］ SAHAI A, SEYALIOGLU H, WATERS B. Dynamic Credentials and Ciphertext Delegation for Attribute-based Encryption［C］//Lecture Notes in Computer Science: 7417. Heidelberg: Springer Verlag, 2012: 199-217.
［10］ YANG K, JIA X H, REN K. Secure and Verifiable Policy Update Outsourcing for Big Data Access Control in the Cloud［J］. IEEE Transactions on Parallel and Distributed Systems, 2015, 26(12): 3461-3470.
［11］应作斌, 马建峰, 崔江涛. 支持动态策略更新的半策略隐藏属性加密方案［J］. 通信学报, 2015, 36(12): 178-189.
YING Zuobin, MA Jianfeng, CUI Jiangtao. Partially Policy Hidden CP-ABE Supporting Dynamic Policy Updating［J］. Journal on Communications, 2015, 36(12): 178-189.
［12］ LI H W, LIU D X, ALHARBI K, et al. Enabling Fine-grained Access Control with Efficient Attribute Revocation and Policy Updating in Smart Grid［J］. KSII Transactions on Internet and Information Systems, 2015, 9(4): 1404-1423.
［13］ QIAN H L, LI J G, ZHANG Y C, et al. Privacy-preserving Personal Health Record Using Multi-authority Attribute-based Encryption with Revocation［J］. International Journal of Information Security, 2014, 14(6): 487-497.
［14］应作斌, 马建峰, 崔江涛. 支持位置验证和策略变更的属性加密方案［J］. 西安电子科技大学学报, 2017, 44(2): 57-62.
YING Zuobin, MA Jianfeng, CUI Jiangtao. Attribute-based Encryption with Location Verification and Policy Adjusting Supporting the Cloud Mobile Office［J］. Journal of Xidian University, 2017, 44(2): 57-62.
［15］ YING Z B, LI H, MA J F, et al. Adaptively Secure Ciphertext-policy Attribute-based Encryption with Dynamic Policy Updating［J］. Science China Information Sciences, 2016, 59(4): 042701.
［16］ LAI J Z, DENG R H, LI Y J. Expressive CP-ABE with Partially Hidden Access Structures［C］//Proceedings of the 2012 7th ACM Symposium on Information, Computer and Communications Security. New York: ACM, 2012: 18-19 .

[1]	杨颜博,张嘉伟,马建峰. 一种使用区块链保护车联网数据隐私的方法[J]. 西安电子科技大学学报, 2021, 48(3): 21-30.
[2]	于金霞,何旭,闫玺玺. 机构可验证的密文策略属性基加密方案[J]. 西安电子科技大学学报, 2019, 46(4): 49-57.
[3]	闫玺玺;刘媛;李子臣;汤永利;叶青. 利用LWE问题构造的多机构属性基加密方案[J]. 西安电子科技大学学报, 2018, 45(4): 129-136.
[4]	马华;白翠翠;李宾;刘振华. 支持属性撤销和解密外包的属性基加密方案[J]. J4, 2015, 42(6): 6-10+55.
[5]	马国峻;裴庆祺;张红祥. 一种支持个性化共享的DRM模型[J]. J4, 2014, 41(3): 187-191.

策略半隐藏且支持更新的多机构属性加密方案

Multi-authority attribute-based encryption scheme with policy semi-hidden and dynamic updating

PDF (PC)

赞

可视化

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 5

Metrics

本文评价

推荐阅读 10